Login Request a demo
TE
Product
text-generation-webui
by oobabooga · last CVE Apr 7, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 3Medium 4Low 0
Severity
All severities9Critical2High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add text-generation-webui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-12487
9.8
1%
Nov 6
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
Affected: 2.5
CVE-2025-12488
9.8
1%
Nov 6
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
Affected: 2.5
CVE-2026-35050
8.8
0%
Apr 6
text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".
Affected: < 4.1.1
CVE-2026-35486
7.5
0%
Apr 7
text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation
Affected: < 4.3
CVE-2026-35485
7.5
1%
Apr 7
text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
Affected: < 4.3
CVE-2025-62364
6.2
1%
Oct 13
text-generation-webui allows arbitrary file read via symbolic link upload
Affected: <= 3.13
CVE-2026-35487
5.3
0%
Apr 7
text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication
Affected: < 4.3
CVE-2026-35484
5.3
0%
Apr 7
text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication
Affected: < 4.3
CVE-2026-35483
5.3
0%
Apr 7
text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication
Affected: < 4.3
Showing 9